When checking for updates, the device first obtains an update helper script (sm_update) from the web, and then immediately runs the content of this script – but with zero sanitation. The most serious vulnerability is a command injection flaw stemming from the sync module update (CVE-2019-3984), which exists in Blink’s cloud communication endpoints for providing updates to devices or obtaining network information. Overall, seven CVEs were disclosed in Blink. This is especially critical when the device in question is a security camera.” “Manufacturers of IoT devices have an opportunity and an obligation to ensure that effective security is baked into the overall design from the start and not bolted on as an afterthought. Precisely for that reason, cybercriminals are focused on compromising them,” said Renaud Deraison, co-founder and CTO with Tenable, in a statement. “Connected devices, like Blink cameras, are everywhere.

Amazon has been notified of the flaws and has rolled out patches. The flaws could enable attackers without access to the devices to view camera footage, listen to audio output and hijack the device for use in a botnet, Tenable researchers disclosed on Tuesday. The internet of things (IoT) cameras (not to be confused with the Blink open-source browser engine), consist of a wireless camera and monitoring system for consumers. Blink cameras bring new meaning to the phrase “set it and forget it.Multiple high-severity vulnerabilities have been discovered in Amazon-owned Blink XT2 security camera systems, which if exploited could give attackers complete control over them. If you want a discreet, low-maintenance security camera that won’t cost an arm and a leg, then it doesn’t get much better than Blink. It has most of the same features, including 1080p resolution, night vision, and motion detection-but the Mini uses a power cord instead of batteries. Blink Mini: The Blink Mini is the little sibling of the other two cameras.Just like the Outdoor, it’s easy to install and has a two-year-long battery life.

You’ll have the same HD recording, night vision, and two-way audio, but this model stays inside.

Blink Indoor: The Blink Indoor is basically the Outdoor camera minus the weatherproofing.

This Outdoor camera is weatherproof and easy to position on a wall, ceiling, or flat surface.

Blink Outdoor: The Blink Outdoor camera runs for two years off two AA lithium batteries, and you don’t have to string a single wire.

Whichever model you choose, you’ll get a decent camera for not a lot of money. They’re cheap and discreet, they don’t use a lot of energy, and they’re easy to install. All three of Blink’s cameras are pretty good.

Blink app security